Skip to content

Add prompt injection and guardrails security guide#1113

Draft
veltson-vapi wants to merge 1 commit into
mainfrom
docs/prompt-injection-and-guardrails
Draft

Add prompt injection and guardrails security guide#1113
veltson-vapi wants to merge 1 commit into
mainfrom
docs/prompt-injection-and-guardrails

Conversation

@veltson-vapi

@veltson-vapi veltson-vapi commented Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown

Description

Adds a new Prompt injection and guardrails guide under Security and privacy. It covers the layers available to protect an assistant against prompt injection and data exposure.

  • New page: fern/security-and-privacy/prompt-injection-and-guardrails.mdx
  • Nav entry under Security and privacy (after JWT authentication) in fern/docs.yml
  • Sections: system prompt handling, then server messages + Live Call Control, then the Security Filter Plan (compliancePlan.securityFilterPlan), then keeping sensitive data out of context (the return-a-status pattern, stored credentials, and tool argument encryption)
  • All claims verified against the codebase (securityFilterUtil.ts, security.types.ts) and the existing tool-argument-encryption guide

Open questions for review

  1. sanitize vs replace filter modes. In securityFilterUtil.ts these run identical code (both substitute the matched phrase with replacementText). The doc currently documents sanitize and notes that replace behaves identically. Is that the intended behavior, or should sanitize strip to empty while replace substitutes? The original author (Adi) has left, so this needs a second opinion before we commit to the wording.
  2. Publishing the raw regex patterns. The "How it works" section lists the literal prompt-injection regexes. That is useful for honest users, but it also tells an attacker exactly how to word around the filter. Keep them, or describe the categories and link the API reference instead?

Testing Steps

  • Run the app locally using fern docs dev or navigate to preview deployment
  • Ensure that the changed pages and code snippets work

@veltson-vapi
veltson-vapi force-pushed the docs/prompt-injection-and-guardrails branch from 404a00e to 42e3327 Compare July 21, 2026 23:15
@github-actions

github-actions Bot commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f86ff-08d5-757a-bc1c-edb73b9b00f6.docs.buildwithfern.com

@veltson-vapi
veltson-vapi force-pushed the docs/prompt-injection-and-guardrails branch from 42e3327 to 9efd059 Compare July 21, 2026 23:35
@github-actions

github-actions Bot commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f8712-e5ad-707d-8ae5-8fb12ea6c057.docs.buildwithfern.com

@veltson-vapi
veltson-vapi force-pushed the docs/prompt-injection-and-guardrails branch from 9efd059 to db030ff Compare July 21, 2026 23:50
@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f8725-83ae-743a-886e-51496c0cc1b0.docs.buildwithfern.com

@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f8731-e3c5-72ab-8980-2039a4c86a15.docs.buildwithfern.com

@veltson-vapi
veltson-vapi force-pushed the docs/prompt-injection-and-guardrails branch 3 times, most recently from 0ac10c2 to db70d58 Compare July 22, 2026 16:49
@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f8ad1-de79-70f8-a062-5b380e8fa217.docs.buildwithfern.com

@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f8ada-060c-759a-a8ac-02b34579bf61.docs.buildwithfern.com

@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f8add-66c5-74ad-83a1-6214047a7509.docs.buildwithfern.com

@veltson-vapi
veltson-vapi force-pushed the docs/prompt-injection-and-guardrails branch 5 times, most recently from e07d78b to 2223e23 Compare July 22, 2026 18:58
@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f8b35-2dd1-7419-a463-c54eaed84110.docs.buildwithfern.com

@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f8b39-47e9-778b-b99d-f30652367575.docs.buildwithfern.com

@veltson-vapi
veltson-vapi force-pushed the docs/prompt-injection-and-guardrails branch 2 times, most recently from ae77c4f to f309370 Compare July 22, 2026 19:10
@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f8b3d-373a-7013-bec7-a03c6c59be4d.docs.buildwithfern.com

@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f8b41-c14c-7725-a7fb-5d174d43d852.docs.buildwithfern.com

@veltson-vapi
veltson-vapi force-pushed the docs/prompt-injection-and-guardrails branch from f309370 to 14b4296 Compare July 22, 2026 19:19
@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f8b46-ded4-733b-99c8-605e77a44baa.docs.buildwithfern.com

@veltson-vapi
veltson-vapi force-pushed the docs/prompt-injection-and-guardrails branch from 14b4296 to ae4c39a Compare July 22, 2026 19:26
@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f8b58-6aa7-77d1-9115-56062c8c8157.docs.buildwithfern.com

@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f8b5c-5339-74ce-b5c1-f12c170b35bc.docs.buildwithfern.com

@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f8b63-512a-725f-8827-5d65baa9340d.docs.buildwithfern.com

@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f8b6b-360f-7274-be1c-0d64af5900c8.docs.buildwithfern.com

@veltsonbastien @claude
Add prompt injection and guardrails security guide
2a072b6 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@veltson-vapi
veltson-vapi force-pushed the docs/prompt-injection-and-guardrails branch from ae4c39a to 2a072b6 Compare July 22, 2026 20:12
@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

🌿 Preview your docs: https://vapi-preview-019f8b9a-ad25-717f-827d-8c5b08b9138c.docs.buildwithfern.com

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@veltson-vapi @veltsonbastien